What’s Vulnerable › Vulnerabilities

CVE-2008-7172

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-09-08 · updated 2026-06-16
• Weakness: CWE-264

Description

Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delete, (2) potd, (3) vote_update, (4) vote, or (5) modifynews actions.

Affected products

• Yanick Bourbeau Lightweight News Portal: 1.0b

References

• http://www.securityfocus.com/bid/29848
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43225
• https://www.exploit-db.com/exploits/5873
• http://www.securityfocus.com/bid/29848
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43225
• https://www.exploit-db.com/exploits/5873

Get alerted when CVE-2008-7172 or the next vulnerability affects your stack